CVE-2024-39713

A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1

High · published August 5, 2024

CVSS v3.0
8.6
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.

The record
Technical detail
CVSS v3.0
8.6 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.03201 · 88.0th percentile
Published
2024-08-05T04:26Z
EPSS history
Timeline
  • 05 AUG 04:26Z
    A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1
    cvelistv5